Hey folks, Anybody here using forms-based auth on the ISA firewall and not using SSL? If you're using FBA or Basic auth without SSL, crater your network, change your passwords, because you've been owned. HTH, Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls